Harden deploy gates, prod AUTH_SECRET, and Sentry error reporting.

Align onlyBuiltDependencies with the workspace, fail fast without AUTH_SECRET in production, and delete catalog_items via VARCHAR-safe SQL so page deletes do not leave orphans.

Co-authored-by: Cursor <[email protected]>

src/instrumentation-client.ts

@@ -1,4 +1,5 @@
 import * as Sentry from "@sentry/nextjs";
+import { redactSentryEvent } from "@/lib/sentry-redact";
 
 const dsn = process.env.NEXT_PUBLIC_SENTRY_DSN;
 
@@ -6,6 +7,7 @@ if (dsn) {
 	Sentry.init({
 		dsn,
 		environment: process.env.NODE_ENV,
+		release: process.env.NEXT_PUBLIC_APP_VERSION || process.env.APP_VERSION,
 		tracesSampleRate: process.env.NODE_ENV === "production" ? 0.1 : 1.0,
 		replaysSessionSampleRate: 0,
 		replaysOnErrorSampleRate: 1.0,
@@ -16,6 +18,7 @@ if (dsn) {
 				blockAllMedia: true,
 			}),
 		],
+		beforeSend: redactSentryEvent,
 	});
 }